Glossary
Admin User
A user from the partner organization responsible for configuring, managing, and monitoring the Sprinklr integration.
API Gateway
A managed service that acts as a single entry point for APIs, handling authentication, routing, rate limiting, and monitoring.
Application Load Balancer (ALB/ELB)
A cloud-managed load balancer that distributes incoming application traffic across multiple targets for scalability and high availability.
CloudFront CDN
A content delivery network service that securely delivers data, videos, applications, and APIs to users globally with low latency.
ECS/EKS
Amazon Elastic Container Service (ECS) and Elastic Kubernetes Service (EKS) are managed container orchestration services for deploying and scaling containerized applications.
End User
An individual who interacts with the partner’s web or mobile application, typically a customer or internal user.
LLM (Large Language Model)
A machine learning model (e.g., OpenAI, Anthropic) used for generating contextual responses and knowledge integration.
mTLS (Mutual TLS)
A security protocol that ensures both client and server authenticate each other using certificates, providing secure, trusted communication.
Partner Organization
An external entity (e.g., bank, retailer) integrating Sprinklr Live Chat into its own applications.
RDS
Amazon Relational Database Service, a managed database service for storing structured data.
S3
Amazon Simple Storage Service, used for storing and retrieving any amount of data at any time.
SaaS (Software as a Service)
A software delivery model in which applications are hosted by a service provider and made available to customers over the internet.
Secrets Manager / Vault
A secure service for storing, managing, and rotating sensitive information such as API keys, certificates, and configuration secrets.
Sprinklr Dashboard
A web interface for partner admin users to onboard, configure, and monitor their Sprinklr integration.
STRIDE
A threat modeling framework covering Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
Trust Boundary
A point where data or control flows across systems or users with differing levels of trust or administrative control.
VPC (Virtual Private Cloud)
A logically isolated section of the cloud where resources are launched in a virtual network defined by the user.
WebSocket
A protocol providing full-duplex communication channels over a single TCP connection, used for real-time chat.
Partner Web App (PWA)
A web application owned and operated by the partner organization, through which end users interact with Sprinklr services.
Partner Backend (PB)
A backend service managed by the partner organization, responsible for authenticating users and securely obtaining Sprinklr tokens from the Sprinklr API Gateway.
Sprinklr API Gateway (AGW)
The entry point for all API requests to Sprinklr services, responsible for authentication, authorization, routing, and security enforcement.
App Services
Application logic and microservices within Sprinklr responsible for handling chat sessions, LLM queries, and business logic.
End-User Token (Sprinklr Token)
A secure token issued by Sprinklr, representing an authenticated end user and used to authorize API requests.
S2S/API Call (Server-to-Server/API Call)
A direct API request between backend services, typically for integration or data exchange, authenticated and secured.
SDK (Software Development Kit)
A set of tools, libraries, and documentation provided by Sprinklr to enable integration with partner applications.
Session Token
A cryptographically signed token representing an authenticated session, used to maintain user state and authorize actions.
JWT (JSON Web Token)
A compact, URL-safe token format used for securely transmitting information between parties as a JSON object, often used for authentication.
OAuth2
An open standard for access delegation, commonly used for token-based authentication and authorization.
SSO (Single Sign-On)
An authentication process that allows a user to access multiple applications with one set of login credentials.
IAM Role
A set of permissions assigned to an identity or service, used to control access to resources in cloud environments.